Advisories · Technology
lemmy.
Every CVE that names lemmy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.5 Medium
Lemmy: Rate limit bypass via X-Forwarded-For header spoofing in actix-web ConnectionInfo
- lemmy
- CWE-799
- CVSS 6.4 Medium
Lemmy: Stored XSS via markdown image alt-text in lemmy-ui html5-embed
- lemmy
- Cross-site scripting (XSS)
- CVSS 6.9 Medium
Lemmy: Login Endpoint User Enumeration via HTTP Response Code Differential
- lemmy
- CWE-204
- CVSS 6.5 Medium
Lemmy: Lower-ranked federated moderator can remove higher-ranked moderators
- lemmy
- Broken access control
- CVSS 5.3 Medium
Lemmy: Blocked users can edit private messages sent before the block
- lemmy
- Broken access control
- CVSS 5.1 Medium
Lemmy: `CollectionAdd::Featured` does not check the post is in the community
- lemmy
- Broken access control